CVE-2023-46158: IBM WebSphere Application Server Liberty

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.

Affected products

• IBM WebSphere Application Server Liberty: from 23.0.0.9, before 23.0.0.11 (fixed in 23.0.0.11)

Published 2023-10-25. Last modified 2026-06-17.